CVE Catalog

CVE-2023-34218

CriticalCVSS 9.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.59%

43th percentile - higher than 43% of all known CVEs

Summary

In JetBrains TeamCity before version 2023.05, it was possible to bypass permission checks, allowing for the execution of admin actions.

Risk Assessment

Organizations may be exposed to unauthorized access to administrative functions, potentially leading to serious security breaches.

Recommendation

It is recommended to upgrade to version 2023.05 or later to secure the system against these vulnerabilities.

Original NVD description (English source)

In JetBrains TeamCity before 2023.05 bypass of permission checks allowing to perform admin actions was possible

Vulnerability data from NVD (NIST) · CISA KEV · EPSS